Skip to content
OpenAdvisories

Product · EGOR

Data::SortedSet::Shared

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths

    Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths. The attach-time validator ss_validate_header bounds only the root index against the node pool (node_capacity). …